Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: Hk0EKkfncKOMouxvFzwEXAUQxnAHXhKGyOymzKT6iaQ=
Subject key identifier: C0:BA:80:8C:BC:E0:6D:92:C5:DD:38:A5:18:7B:82:00:F6:35:06:1E
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019A503E2CCD790801F30E138E20AB36F657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0CF9
Signing time: Tue 04 Nov 2025 19:00:43 +0000
Manifest this update: Tue 04 Nov 2025 19:00:43 +0000
Manifest next update: Wed 05 Nov 2025 19:00:43 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: ByKzgTD0eOYRW9mvVPMKwQVuw5o04RH/4xpgUxmbAGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:2c:cd:79:08:01:f3:0e:13:8e:20:ab:36:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Nov 4 19:00:43 2025 GMT
Not After : Nov 5 19:00:43 2025 GMT
Subject: CN=c0ba808cbce06d92c5dd38a5187b8200f635061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:5d:8e:a2:8a:d3:c0:07:c9:8a:66:a0:d4:
1a:0c:8e:ef:f7:5e:e9:cc:8b:c6:b7:3d:e0:07:61:
71:59:44:a9:62:f0:2c:d5:27:07:db:b5:4e:66:bc:
ef:15:25:8f:56:a4:ad:11:79:56:0c:9c:c2:41:ee:
f9:57:c6:77:36:01:c0:5d:c4:de:9c:e9:d8:fb:7f:
b3:69:fb:96:e4:42:cd:c8:f9:33:88:be:a4:03:70:
c3:a8:25:f5:3d:a2:94:88:8f:1b:61:34:c2:6a:11:
32:59:4e:fb:66:9b:a8:52:dc:ae:56:85:d8:33:91:
a0:31:82:94:73:f2:03:42:e4:45:b3:cb:c7:f4:8c:
f3:80:8e:46:97:4b:fc:59:14:64:fc:66:81:25:70:
b7:36:a7:5e:b8:9c:46:7b:05:a6:0e:16:ba:af:a6:
a1:a3:93:bd:c7:b9:57:4d:bb:9e:a7:81:4f:11:35:
a4:59:83:6e:c5:41:ed:65:39:f1:06:1d:80:79:9d:
bf:b4:cf:b8:63:e6:4e:df:5f:08:40:29:8e:c9:90:
c6:bb:b5:9e:af:4b:8e:4d:84:fe:e6:9e:60:74:ac:
c4:c4:2a:4d:40:6b:17:eb:c3:9a:dc:d0:5e:21:ef:
a4:0d:fb:39:12:95:47:4d:05:b9:20:57:27:60:8d:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BA:80:8C:BC:E0:6D:92:C5:DD:38:A5:18:7B:82:00:F6:35:06:1E
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:86:4c:7a:46:24:80:78:eb:8d:0b:d3:e1:e7:af:3a:f9:60:
c4:93:91:04:03:38:3c:b6:3a:2c:dd:12:51:15:a3:c1:ff:0f:
c5:80:15:68:f4:ad:cc:96:fa:79:7c:8f:1d:67:e3:82:74:ae:
96:7f:db:ea:e7:52:e0:07:46:86:75:04:02:7d:18:be:fd:c7:
f7:49:17:e0:05:5c:e0:52:fe:c9:0a:22:46:05:b0:40:9b:42:
05:34:6d:5e:fa:6e:ee:f5:8e:4c:74:ea:a5:32:01:e2:26:c1:
7e:21:96:d1:fc:ed:dd:45:22:cf:73:ad:a5:73:b1:f0:a2:73:
1e:67:ff:13:09:2d:ee:cb:a7:53:45:5c:2b:7a:63:31:6c:3d:
97:93:f0:9d:9f:ff:85:bf:f2:53:cc:68:6d:cf:aa:14:12:25:
77:d8:22:35:f1:9b:23:0a:b6:a5:99:f4:cb:45:0f:e8:54:5a:
89:25:f1:52:01:39:df:d9:a2:a3:6d:09:78:31:93:11:b0:cc:
09:b8:07:f4:29:cd:40:9d:4f:1e:46:95:08:67:87:86:49:a6:
68:11:0b:27:a1:a9:e3:b0:69:a8:51:06:29:bc:16:67:0f:e4:
33:f5:10:bf:bb:a3:fe:bf:cd:8e:d2:bd:ea:d4:90:92:97:53:
ce:ec:23:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:09 2025 by rpki-client